Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9D2DC842410111EBA3CBCB1DC4F9AE02.roa
File: 9D2DC842410111EBA3CBCB1DC4F9AE02.roa (raw, json)
Hash identifier: 6lyAlHuGIAPkhscyGWI1sKqo1LPDH3AjPRPy0MHoSbY=
Subject key identifier: 2C:EF:66:4A:DE:D0:29:5F:31:E7:7C:1E:78:C0:22:BD:18:D0:7F:5F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 587B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9D2DC842410111EBA3CBCB1DC4F9AE02.roa
Signing time: Mon 04 Jul 2022 08:21:26 +0000
ROA not before: Mon 04 Jul 2022 08:21:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135760
IP address blocks: 103.75.160.0/24 maxlen: 24
103.75.161.0/24 maxlen: 24
103.75.162.0/24 maxlen: 24
103.75.163.0/24 maxlen: 24
103.176.116.0/24 maxlen: 24
103.176.117.0/24 maxlen: 24
103.189.130.0/23 maxlen: 24
2001:df0:d040::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22651 (0x587b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 4 08:21:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c2a305-404e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:e4:f5:68:b4:aa:bc:b1:4f:d6:79:e1:be:
7b:f6:8e:9e:9b:34:72:e0:05:8f:ce:c6:b9:63:4a:
61:fe:38:eb:bc:35:f7:84:ca:df:03:97:07:ed:e9:
a3:f8:e1:36:4d:aa:36:e2:52:6e:9c:d9:d7:57:90:
41:40:15:bf:e7:d5:40:ca:f7:49:4d:b2:78:e9:f3:
d8:50:6c:cc:74:01:59:92:56:7d:54:db:29:27:6a:
6c:28:1f:e3:92:5a:b1:07:19:c9:4f:29:46:2e:21:
78:ca:41:c9:b4:eb:b7:e6:bd:cc:3e:b1:07:87:28:
d7:0b:6c:13:91:f3:b0:ae:cd:21:85:33:64:19:8d:
f5:8e:f7:74:ed:60:0d:f5:71:f3:48:6f:72:f0:e6:
1b:99:09:7c:55:f9:c0:da:4e:39:76:bf:a6:24:c9:
be:0c:97:0e:ae:b9:40:de:09:22:e2:96:b2:9c:d4:
ba:41:f4:c7:73:08:e0:a5:41:7c:50:65:20:97:f0:
f6:ba:c2:78:20:92:03:11:da:f4:bf:15:74:85:29:
e8:43:6c:48:0f:d0:98:f9:e6:bc:7a:35:a6:aa:c9:
74:4b:73:70:20:eb:8b:44:f6:c2:35:a0:d6:c8:47:
2f:b7:b5:fc:b2:a2:11:ca:95:f4:46:e0:25:8c:eb:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EF:66:4A:DE:D0:29:5F:31:E7:7C:1E:78:C0:22:BD:18:D0:7F:5F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9D2DC842410111EBA3CBCB1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.160.0/22
103.176.116.0/23
103.189.130.0/23
IPv6:
2001:df0:d040::/48
Signature Algorithm: sha256WithRSAEncryption
aa:a5:51:e3:ca:cc:cb:15:86:aa:ba:81:ff:a8:46:3c:84:4e:
56:09:b4:af:fd:76:23:89:9d:88:b7:3f:5d:1c:75:02:cf:9d:
79:06:e8:69:34:17:94:99:2d:f8:6c:00:e5:6b:db:f0:30:ab:
eb:21:7a:dc:1e:92:01:c3:ad:54:10:b0:26:f5:54:a4:8d:63:
b9:56:54:cc:fd:89:e1:05:8d:02:0b:d8:cc:c4:d5:42:b7:6b:
67:2f:98:ea:ad:7b:60:45:9f:e9:3a:28:fa:e7:70:43:76:f5:
a4:f7:7f:75:97:fb:d2:83:19:2f:8b:94:0d:1d:79:cc:33:72:
ee:1a:d4:bf:24:f5:84:84:9b:df:a3:f1:42:4e:23:e5:19:b9:
38:25:22:43:75:c4:8c:59:3e:cd:45:dc:c8:cc:23:d1:05:49:
2a:5a:93:71:97:15:31:cd:f1:e7:31:09:0b:01:ff:a5:f1:3d:
79:1d:02:fb:7d:fd:83:90:f8:a3:db:29:d2:81:b3:3f:6d:a1:
fa:d8:5e:f5:e8:f0:b3:93:84:b6:95:ed:ca:6b:a5:5e:0d:91:
0d:cf:9a:18:dd:30:34:65:39:d9:e7:da:59:59:38:14:6b:e5:
f8:97:b5:3d:61:2f:10:44:73:ff:04:0d:5d:02:fd:78:49:94:
a6:b0:af:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org